Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3a15af39-6818-4eeb-bbaf-283b7bfffba9.roa
File: 3a15af39-6818-4eeb-bbaf-283b7bfffba9.roa (raw, json)
Hash identifier: YyJX7eFPsOpp6epOOwlleX3VhjoadqoIFwYCvcpwRY4=
Subject key identifier: D3:CA:F6:C7:88:DB:35:2A:3B:8A:53:19:64:AC:B9:89:14:AD:25:C5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 68203A03F0F5F5FBAF428C77F80982514820B677
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3a15af39-6818-4eeb-bbaf-283b7bfffba9.roa
Signing time: Mon 26 Oct 2026 05:10:18 +0000
ROA not before: Mon 26 Oct 2026 05:10:18 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d036::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:20:3a:03:f0:f5:f5:fb:af:42:8c:77:f8:09:82:51:48:20:b6:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:10:18 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=0e67401f9f731ebac6238fcd40537240f3dea11933edf6d00b53f30a50472a93, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8e:0e:35:98:c5:fc:ef:da:ca:e0:18:3f:d8:
e8:8b:e6:08:b8:3c:4a:70:2f:b9:78:0b:63:47:de:
0a:09:9b:d9:1f:1a:60:a4:32:f4:c1:87:95:b1:b4:
45:df:73:b8:71:09:e2:5b:fd:8b:33:ef:0f:f2:29:
8b:9d:be:3c:c4:08:d1:fd:b2:74:5e:24:65:f8:03:
bf:5c:eb:b5:12:cc:d1:6b:3a:7b:fb:c0:77:4c:85:
4e:74:c9:eb:e7:38:ce:39:0d:6e:97:9a:85:f8:bc:
72:e4:9b:b5:fd:5e:df:67:41:59:c6:cf:82:8b:09:
88:5d:f6:51:ea:9c:f7:68:98:e7:fd:d3:05:91:4f:
3a:ca:6e:31:c5:6b:fb:fd:8a:3a:d3:ca:d1:b5:43:
5e:1d:e1:b0:01:86:8d:cc:2f:ae:73:71:5a:66:00:
f5:52:f0:16:c1:7d:e0:80:36:b2:66:d6:b7:bf:48:
1a:19:21:84:07:9e:04:75:a0:de:3f:0b:a3:81:d0:
9b:25:5b:f8:28:9e:10:88:24:44:37:f1:7b:4b:aa:
7b:d2:cb:f8:85:06:72:97:24:39:24:95:0f:68:fa:
a0:82:81:53:c2:5b:fb:72:6b:ca:91:ae:6a:59:24:
d0:24:5a:47:e5:7c:26:0c:2a:f4:07:0b:24:de:06:
20:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CA:F6:C7:88:DB:35:2A:3B:8A:53:19:64:AC:B9:89:14:AD:25:C5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3a15af39-6818-4eeb-bbaf-283b7bfffba9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d036::/32
Signature Algorithm: sha256WithRSAEncryption
8a:b5:1d:60:84:dc:21:5d:f2:18:da:1e:65:b4:df:18:a8:0b:
1e:66:c5:c6:b9:76:4d:b7:cf:c2:c2:45:04:57:59:a6:5f:54:
5c:b5:89:36:9f:78:bd:6c:80:8c:2c:08:03:0a:36:ce:8f:71:
ab:1f:0f:d6:b4:80:cd:3a:da:8f:5c:49:8d:f1:d1:63:ab:8f:
14:57:d0:35:c3:e6:d7:19:85:74:e7:be:5f:3d:6f:ab:46:59:
44:58:c8:1f:a0:18:8c:6d:bb:8a:7f:0a:55:aa:f7:a3:18:90:
4c:ca:35:15:45:60:15:a1:8b:95:59:4b:0c:28:40:04:47:b5:
b6:0b:d6:93:51:29:af:17:8e:7b:0a:db:d7:c2:20:9e:76:e2:
03:5c:4c:ab:d8:22:82:77:b9:2b:64:97:4c:d8:0a:c0:36:bf:
f0:cd:a9:4f:5a:e8:df:f9:c6:da:2e:fd:92:c4:16:41:92:d6:
96:e6:31:82:6f:94:dd:f0:e9:5c:51:7f:e5:33:d8:2f:7a:9d:
6f:66:e0:86:46:ac:c8:e5:80:b1:cd:13:68:db:73:79:eb:3f:
4e:e2:d0:84:fc:6f:a4:bc:5f:90:0b:f9:eb:b3:3d:f0:1f:6f:
29:c9:6b:94:de:b5:88:78:6b:c0:71:f4:21:66:0a:80:6e:49:
81:86:0b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:35:33 2026 by rpki-client